Virtualization

LXC

NFS mount

Error messages came up when mounting NFS directory in a system running on LXC container.

mount: [ip address]:/shared/storage/ is write-protected, mounting read-only
mount: cannot mount [ip address]:/shared/storage/ read-only

When I saw /var/log/messages:

Jun  4 00:33:00 virt kernel: [407261.190708] audit: type=1400 audit(1465000380.283:50): apparmor="DENIED" operation="mount" info="failed type match" error=-13 profile="lxc-container-default" name="/local/mount/point/" pid=23343 comm="mount" fstype="nfs" srcname="[ip address]:/shared/storage/" flags="ro"

Configure the host of the LXC container to add an option in AppArmor configuration related to LXC.
```
# nano /etc/apparmor/lxc/lxc-default
```
```
...
   mount fstype=nfs,
}
```
Restart apparmor service.
```
# systemctl restart apparmor.service
```